Grant permissions to a RAM user as a Service Catalog administrator - Service Catalog

The administrator can define, manage, and distribute compliant IT services. The administrator must have the permissions to access the Service Catalog console, manage products, product portfolios, and constraints, and grant end user permissions. The administrator can be an Alibaba Cloud account, a Resource Access Management (RAM) user, or a RAM role. In this topic, the administrator is a RAM user.

Prerequisites

A RAM user is created. For more information, see Create a RAM user.

Procedure

Console

Log on to the RAM console.
On the Users page, find the target RAM user and click Add Permissions in the Actions column.
In the Grant Permission panel, add permissions for the RAM user.
1. Set Resource Scope to Account.
2. In the Policy section, search and select the AliyunServiceCatalogAdminFullAccess system policy. To grant a custom policy, you must first create a custom permission policy and then select the required permissions.
  Note
  The AliyunServiceCatalogAdminFullAccess policy grants full administrative permissions for Service Catalog. An administrator with this policy can access and configure all features for end users and other administrators.
Click OK.

OpenAPI

Grant a custom policy

You can create a custom policy by calling CreatePolicy. For more information, see Basic elements of an access policy and Overview of the access policy example library.
Call AttachPolicyToUser to attach the access policy to the specified RAM user. Set PolicyType to Custom.

Grant a system policy

Call AttachPolicyToUser to attach the access policy to the specified RAM user. Set PolicyType to System and PolicyName to AliyunServiceCatalogAdminFullAccess.